Quantum secure communication scheme with W state 
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Recently, Cao et al. proposed a new quantum secure direct communication scheme using W 
state. In their scheme, the error rate introduced by an eavesdropper who takes intercept-resend 
attack, is only 8.3%. Actually, their scheme is just a quantum key distribution scheme because the 
communication parties first create a shared key and then encrypt the secret message using one-time 
pad. We then present a quantum secure communication scheme using three-qubit W state. In 
our scheme, the error rate is raised to 25% and it is not necessary for the present scheme to use 
alternative measurement or Bell basis measurement. We also show our scheme is unconditionally 
secure. 

PACS numbers: 03.67.Dd, 03.67.Hk 



Quantum key distribution (QKD) utilizes quantum ef- 
fects to distribute a secret key among legitimate parties 
dHQ. Different to QKD, Quantum secure direct com- 
munication (QSDC) is to transmit the secret message 
directly without first establishing a key to encrypt them 

mm. QSDC can be used in some special environ- 
ments which has been shown by Bostroem and Deng 
et al.|3,Jp. Many researches have been carried out in 

QSDC [riiiiiiiiaiiiiiiiiiiiiiiiiiip. 

These works can be divided into two kinds, one utilizes 
single photons, the other utilizes entangled state. Deng 
et al. proposed a QSDC scheme using batches of sin- 
gle photons which serves as one-time pad 0. Cai et 
al. presented a deterministic secure direct communica- 
tion scheme using single qubit in a mixed state [lClj| . 
We proposed a QSDC scheme and a multiparty con- 
trolled QSDC scheme using order rearrange of single 
photons [ij. Einstein-Podolsky-Rosen (EPR) pairs and 
Greenberger-Horne-Zeilinger (GHZ) states are the main 
quantum channels exploited in the QSDC. Deng et al. 
put forward a two-step QSDC protocol using Einstein- 
Podolsky-Rosen (EPR) pairs Q. We presented a QSDC 
scheme using EPR pairs and teleportation 12] and a 
multiparty controlled QSDC scheme using Greenberger- 
Horne-Zeilinger (GHZ) states Wang et al. proposed 
a QSDC scheme with quantum superdense coding ^3 
and a multi-step QSDC scheme using GHZ state [l5l |. 
Gao et al. and Zhang et al. each presented a QSDC 
scheme using entanglement swapping [TgI It^ . 

Entanglement is at the heart of quantum information 
processes. The entanglement of three-qubit is classified 
by separable, bi-separable, W, and GHZ state 18, 19, 20]. 
W state has the different physical properties from GHZ 
state An important characteristic of three- 

particle GHZ state is that loss of any one of the qubits 
leaves the other two in a mixed state with only classical 
correlations. W state is the 3-qubit state in which each 



pair of qubits have the same and maximum amount of 
bipartite entanglement. This feature makes the entan- 
glement of the W state maximally symmetrically robust 
against loss of any single qubit. The GHZ class state 
cannot be transformed to the W class state under any 
local operation and classical communication (LOCC). 



In a recent Letter, Cao et al. proposed a novel QSDC 
scheme based on a series of four-qubit W states and local 
Bell basis measurement (hereafter called Cao's scheme) 
[23|. However, Cao's scheme is not a genuine QSDC 
scheme. And if an eavesdropper, say Eve performs 
intercept-resend attack on their scheme, the error rate 
introduced by her is only 8.3%. Then if the communica- 
tion parties did not detect the existence of Eve, all the 
secret messages will be stolen by Eve. To improve the 
ability of eavesdropping check, we present a quantum se- 
cure communication scheme using three-qubit W states. 
In the present scheme, the error rate introduced by Eve 
can achieve 25%. At the same time, the efficiency of 
the scheme is also improved because the communication 
parties need only to perform deterministic von Neumann 
measurement. Different to QKD, in our scheme, the com- 
munication parties cannot establish a shared key without 
the sender's measurement results. Only after obtaining 
the sender's classical message could the receiver recover 
the sender's secret message, which is different to QSDC 
in some sort. Therefore we call the present scheme quan- 
tum secure communication scheme. The security for the 
scheme is the same as that for BBM92 protocol 3] , which 
is unconditional secure. 
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We first consider the intercept-resend attack in Cao's 
scheme. The four-qubit symmetric W state can be writ- 
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ten in different bases as 
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where |+) = ^(|0) + |1)), |-) = ^(|0) - |1)). Ac- 
cording to Cao's scheme, Ahce sends the B sequence to 
Bob. Suppose Eve intercepts the B sequence and per- 
forms Z-basis (|0), |1)) measurement on the two parti- 
cles Pi (3, 4) in the B sequence (In this attack, Eve can 
also use Bell basis measurement). If Eve's measurement 
result is |00) (|10) or |01)), she resends the particles 3, 4 
in the state |00) (|V'^)) to Bob. In Cao's scheme, Alice 
will choose randomly Z-basis, X-basis (|+), |— )) or Bell 
basis measurement to check eavesdropping. Because of 
Eve's attack, the W state collapses to 
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each with probability 1/2. Obviously, Eve's attack will 
not introduce any error if Alice and Bob perform Z-basis 
or Bell basis measurement. If the two parties perform 
X-basis measurement, the error rate introduced by Eve 
wiU be 1/4 according to the Eqs. G] [3 and 01 Thus 
the total error rate is 1/3 x 1/4 = 0.083. And if Alice 
utilizes this insecure quantum channel to transmit her 
secret message, according to the process of Cao's scheme. 
Eve will obtain all of Alice's secret messages because Eve 
can make certain whether Alice's or Bob's measurement 
result is ji/'"'') or |^^) in this attack. 

Suppose Alice encodes IV'^)^ 0, |0^)^ 1 and Bob en- 
codes \(lr^)^ 0, IV'^)^ 1. According to Cao's scheme, af- 
ter the eavesdropping check, Alice and Bob perform Bell 



basis measurements on their corresponding particles and 
they then establish a shared key. The classical messages 
that Alice sends to Bob are actually the data which Alice 
generated by using their shared key to encrypt her secret 
messages. In other words, Alice's outcome encoding ® 
her secret message equals to classical information, where 
© indicates modulo 2 addition. Bob can then recover the 
secret message by using his outcome encoding © classical 
information, which is the same as one-time pad. 

We then present a quantum secure communication 
scheme using three-qubit W state in order to improve 
the checking probability and the efficiency for the scheme 
with W state. The details of our scheme is as follows: 

(SI) Ahce prepares N three-qubit W states each of 
which is randomly in one of the two states 



l$i> 
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where 1, 2 and 3 represent the three particles of W state. 
We denotes the ordered N three-qubit W states with 
[Pi(l,2,3),P2(l,2,3),---, PAr(l,2,3)] (hereafter called 
W sequence), where the subscript indicates the order 
of each three-particle in the sequence. Alice takes the 
particles 1 and 2 from each state to form an ordered par- 
ticle sequence [Pi(l,2), P2(l,2),---, PAr(l,2)], called A 
sequence. The remaining partner particles compose B 
sequence, [Pi(3), P2(3),---, P7v(3)]. Alice selects ran- 
domly a sufficiently large subset from the W sequence 
for eavesdropping check, called checking sequence (C se- 
quence) . The remaining particles in the W sequence form 
a message sequence (M sequence). 

(S2) Alice encodes her secret message on the M se- 
quence by performing one of the two unitary operations 



/=|0)(0| + |1)(1|, 

C/ = *a, = |0)(l|-|l)(0|. 



(6) 



on each of the particles 3 in the M sequence. If her 
secret message is "0" ("1"), Alice performs operation / 
([/). The operation U flips the state in both Z-basis and 
X-basis, as 



U\Q) 
U\+) 
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Alice then sends the B sequence to Bob. 

(53) After confirming Bob has received the B sequence, 
Alice announces publicly the initial states she prepared. 
If the initial state is Bob has nothing to do. If the 
initial state is |'I'2), he performs Hadamada operation on 
the particle 3 in the B sequence. 

(54) Ahce publishes the position of the C sequence. 
Both Alice and Bob measure the sampling particles in 
the Z-basis. Alice let Bob announce his measurement 
results. If Alice's resuh is |10) or |01) (|00)), Bob's result 
must be |0) (|1)). She can then evaluate the error rate 
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of the transmission of the B sequence. If the error rate 
exceeds the threshold, they abort the scheme. Otherwise, 
they continue to the next step. 

(S5) Alice and Bob perform Z-basis measurements on 
their corresponding particles in the M sequence. Alice 
then publishes her measurement results of the particles 
2, 3 in the M sequence. Thus Bob can recover Alice's se- 
cret message, according to Alice's result, as illustrated in 
Table 1. Suppose Bob's result is |0). If Alice's measure- 

TABLE I: The recovery of Alice's secret message 



Alice's result 


Bob's result 


secret message 


iO) or |0i) 


|()) 





10) or |01) 


|1> 


1 


|00) 


|0) 


1 


|00) 


|1) 






ment result of particle 2, 3 in the M sequence is |00) (|10) 
or |01)), they then conclude that Alice's secret message 
is "1" ("0"). 

We now discuss the security for the present scheme. 
We first consider the intercept-resend attack strategy. In 

this attack. Eve intercepts the particles in the B sequence 
and makes measurements on them. Then she resends 
a particle sequence to Bob according to her measure- 
ment results. In other words, the state of each par- 
ticle in the resend sequence is equal to her measure- 
ment result. Suppose Eve measures the intercepted par- 
ticle in Z-basis. If the initial state is |$2), it collapses 
to -i=(|10)+|01) + |00))|0) or -i=(|10) + |01)-|00))|l) each 
with probability 1/2. Thus the error rate introduced by 
Eve will be 1/2 X 1/3 1/2 X 2/3 = 1/2. If the ini- 
tial state is I*!*!), Eve's attack will not be detected. In 
this instance, the total error rate is 25%. Suppose Eve 
measures the intercepted particle in the X-basis. Sim- 
ilarly, if the initial state is the state will collapse 
to -i=(|10)-f|01)-f|00))H-) or -i=(|10) + |01)-|00))|-) each 

with probability 1/2. According to the scheme, Bob will 
perform Hadamada operation on the particle 3. Thus the 
error rate will also be 1/4. Therefore, in the intercept- 
resend attack, the total error rate introduced by Eve 
achieves 25%. 

We then consider the collective attack strategy. In this 
strategy. Eve intercepts the particle Pi(3) (i=l,2,- • • ,N) 
and uses it and her own ancillary particle in the state 
|0) to do a CNOT operation (the particle Pi (3) is the 
controller, Eve's ancillary particle is the target). Then 
Eve resends the particle Pi(3) to Bob. However, Eve 
cannot make certain the initial state which the particle 
3 belongs to. Suppose the initial state is l^*!), Eve will 



attack successfully. But if the initial state is \^2), the 
state is changed to 

W,) = -L[(|io) + |oi))(|oo) + |ii)) 

+ |00)(|00) - |ll))]l23e, ^ (8) 

where the subscript e indicates Eve's ancillary parti- 
cle. According to the scheme, j^j) will collapse to 
^(|10)+|01)+|00))|00) or ^(|10)+|01)-|00))|11) each 
with probability 1/2. Similar to the analysis in the 
intercept-resend attack, in this attack, the total error rate 
introduced by Eve is also 25%. 

In fact, the security for the present scheme is based 
on entanglement and random Hadamada operation. In 
the scheme, the random Hadamada operation is equal 
to selecting Z-basis or X-basis randomly to measure the 
transmitting particle. Note that 

|$i) = -^[(|10) + |01))|0) + |00)|l))]i23, (9) 

|$i) = i=[(|10) + |01))|+) + |00)|-))]i23. (10) 

In this way, the security for the scheme is the same as 
that for BBM92 protocol which is proved to be uncon- 
ditionally secure. As we described above, our scheme is 
also unconditionally secure. 

So far we have presented a quantum secure communi- 
cation scheme using W state. The security for the scheme 
is equal to that for BBM92 protocol. Cao's scheme is 
not a genuine QSDC scheme because the communication 
parties first establish a shared key and then encrypt the 
sender's secret to the receiver. Strictly speaking, our 
scheme is also not a QSDC scheme because only the 
sender's measurement result has been published could 
the receiver recover the sender's secret. Certainly, our 
scheme is not a QKD scheme because the communication 
parties can not establish a shared key if the sender's mea- 
surement result is not published. Therefore we call the 
present scheme quantum secure communication scheme. 
In our scheme, all of the W states are used to transmit the 
sender's secret message except those chosen for checking 
eavesdropping. The communication parties need only de- 
terministic von Neumann measurement. In this way, the 
present scheme is practical within today's technology. 
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